# Change Password Strength

By default, password strength is set to Strong. To set password strength:

1. Under Configuration, click MiCollab Settings.

2. Click Password Strength tab.

3. Select the desired strength:

   Weak passwords must

   - be from 6 to 20 characters in length

   - not contain your old password or your Login ID

   - not be the same as recently used 1 password.

   Medium passwords must:

   - be from 7 to 20 characters in length

   - not be too simple (cannot contain a word from a dictionary or be too repetitive)

   - not contain your old password or your Login ID

   - not be the same as recently used 3 passwords.

   Strong passwords must:

   - be from 8 to 20 characters in length

   - not be too simple (cannot contain a word from a dictionary or be too repetitive)

   - contain at least one uppercase letter, one lowercase letter, one number, and one non-alphanumeric character (for example #)

   - not contain your old password or your Login ID

   - not be the same as recently used 5 passwords.

4. Click Save.

## Conditions and Limitations

- If the administrator resets the password from the Server Manager, the password that is reset is stored in the passwords history.

  The end-user can now reset their password to (N-1) password onwards.

  where N is the password strength; N=1 for Weak password, N=3 for Medium password, and N=5 for Strong password.

- If you change the Password Strength rules, the new rules will take into effect only if the end-user changes the password to a new one as per the policy.

  For example, if the password strength for an user is changed from Strong to Weak, the user will still not be able to reset the password to recently used five passwords. The Weak policy is effective only if the user changes the password to a new one.